Skip to content

Conversation

@merlimat
Copy link
Contributor

@merlimat merlimat commented Nov 26, 2025

Motivation

Fix for CVE-2024-53990

Modifications

Verifying this change

  • Make sure that the change passes the CI checks.

(Please pick either of the following options)

This change is a trivial rework / code cleanup without any test coverage.

(or)

This change is already covered by existing tests, such as (please describe tests).

(or)

This change added tests and can be verified as follows:

(example:)

  • Added integration tests for end-to-end deployment with large payloads (10MB)
  • Extended integration test for recovery after broker failure

Does this pull request potentially affect one of the following parts:

If the box was checked, please highlight the changes

  • Dependencies (add or upgrade a dependency)
  • The public API
  • The schema
  • The default values of configurations
  • The threading model
  • The binary protocol
  • The REST endpoints
  • The admin CLI options
  • The metrics
  • Anything that affects deployment

Documentation

  • doc
  • doc-required
  • doc-not-needed
  • doc-complete

Matching PR in forked repository

PR in forked repository:

@merlimat merlimat added this to the 4.2.0 milestone Nov 26, 2025
@merlimat merlimat requested a review from lhotari November 26, 2025 20:03
@merlimat merlimat self-assigned this Nov 26, 2025
@github-actions github-actions bot added the doc-not-needed Your PR changes do not impact docs label Nov 26, 2025
@lhotari
Copy link
Member

lhotari commented Nov 27, 2025

Regarding CVE-2024-53990, it's also fixed in 2.12.4.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants